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REMARKS 

Claims 1-18 are pending in this application. Claims 1, 9, and 15 are the independent 
claims in this case. It is beheved that no new matter has been added by this amendment. 

The disclosure is objected to because it contains embedded hyperlinks in paragraphs 
[0019], and [0021] of the original application text. The Applicants respectfully offer remarks to 
traverse this objection. The Applicants have amended the specification by deleting these 
hyperlinks. The Applicants note that paragraphs [0019] and [0021] of the original application 
text were renumbered as paragraphs [0031] and [0060] in the published version of this patent 
application. Accordingly, reconsideration and withdrawal of this objection are respectfully 
requested. 

Claims 1, 6, and 7 are rejected under 35 U.S.C. §103(a) as being unpatentable over PCT 
Publication No. 2001/25970 published in the name of Skoyles-Greenberg ("Skoyles- 
Greenberg"). Claims 2 is rejected under 35 U.S.C. § 103(a) as being unpatentable Skoyles- 
Greenberg in view of U.S. Patent No. 5,765,138 issued in the name of Aycock ("Aycock"). 

Claims 3 and 4 rejected under 35 U.S.C. § 103(a) as being unpatentable Skoyles- 
Greenberg in view of U.S. Patent Application Publication No. 2004/0010709 published in the 
name of Baudoin ("Baudoin"). Claim 5 is rejected under 35 U.S.C. § 103(a) as being 
unpatentable Skoyles-Greenberg in view of Baudoin, and fiirther in view of U.S. Patent No. 
7,136,792 issued in the name of Balz et al. ("Balz"). 

Claims 9-12 and 14-16 are rejected under 35 U.S.C. § 103(a) as being unpatentable 
Aycock in view of Skoyles-Greenberg. Claims 13, 17, and 18 are rejected under 35 U.S.C. 
§ 103(a) as being unpatentable Aycock in view of Skoyles-Greenberg, and further in view of 
Baudoin. 

In view of the amendments and remarks presented herein, the undersigned respectfully 
traverses these rejections as set forth below. The undersigned will address each independent 
claim separately as the Applicants believe that each independent claim is separately patentable 
over the prior art of record. 
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Indepencient Claim 1 

It is respectfully submitted that Skoyles-Greenberg, Aycock, Baudoin, and Balz, 
individually or in view of each other, fail to describe, teach, or suggest the combination of: (1) 
providing individual requirements of the at least one maturity model on a display; (2) receiving 
generalized work products (3) through a user interface and (4) storing the generalized work 
products (5) in a first table; (6) with a computer processor, (7) relating the individual 
requirements of the at least one maturity model (8) stored in a second table (9) to the generalized 
work products (10) stored in the first table; (11) receiving company-specific work products (12) 
through a user interface and (13) storing the company-specific work products in a third table; 
(14) with a computer processor, (15) associating at least some of the company-specific work 
products (16) stored in the third table (17) with at least some of the generalized work products 
(18) stored in the first table; (19) with a computer processor, (20) tracing the company-specific 
work products (21) stored in the third table (22) to the individual requirements of the at least one 
maturity model (23) stored in the second table through the association of the at least some 
company- specific work products (24) stored in the third tabic with at least some of the 
generalized work products (25) stored in the first table; and (26) providing an indicator of the 
approximate maturity of the company in view of the at least one maturity model, as recited in 
amended independent Claim 1 . 

Support for these elements can be found in paragraphs [0029] and [0065-0666] and 
Figures 6, 7, 12-13, 17, and 18 of the published, original application as filed. 

Skoyles-Greenberg 

Skoyles-Greenberg explains how four steps illustrated in Figure 1 are combined by 
human team members to provide an Operation Maturity Model (OMM) assessment. The 
Skoyles-Greenberg reference explains how it may be helpfiil to consider the steps illustrated in 
Figure 1 as being grouped into three stages. 
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The "planning stage" includes the step of Defining OMM Capability Requirements 1520. 
The "performing stage" includes the steps of Assessing Current Capabilities 1540 and 
Identifying and Resolving Gaps 1570. The "reporting stage" includes the step of Developing OM 
Capability Blueprints 1580. Skoyles-Greenberg, page 9, line 28 through Page 10, line 4. 

Skoyles-Greenberg explains how each step in Figure 1 can have several tasks. For Step 
1520, there are at least four tasks as illustrated in Figure 2 below. Skoyles-Greenberg describes 
the details of each task, which arc completed by human team members . 
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For example, see the description of Task 1525: Obtaining Work Products and 
Documentation Task 1525 include gathering evidence and documents relating to IT operations. 
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Assessment team members prepare exploratory questions based on responses to the maturity 
questionnaires and on OMM Interview Guides. Interview Guides are a set of exploratory 
questions about the operations environment which are used during the interview process to 
obtain more detailed information on the capability of the IT organization. The interview aids are 
used by the assessment team to guide them through interview sessions 1541 with assessment 
participants. OMM participants will also receive a Work Product List. In response to the list of 
work products, assessment participants prepare documentation for the assessment team members 
to review. Documentation about the IT operations functions allows the assessment team to tie IT 
organization data to the OMM. Skoyles-Greenberg, page 11, line 28 through page 12, line 9. 

In view of the significant human actions and human team approach described by Skoyles- 
Greenberg, one of ordinary skill in the art recognizes that such a system and method cannot 
anticipate or render obvious a computer system or computer-implemented method. Specifically, 
one of ordinary skill in the art recognizes that Skoyles-Greenberg cannot anticipate or obviate 
elements which include providing individual requirements of the at least one maturity model on a 
display; receiving generalized work products through a user interface and storing the generalized 
work products in a first table; with a computer processor, relating the individual requirements of 
the at least one maturity model stored in a second table to the generalized work products stored 
in the first table, as recited in amended independent Claim 1 . 

Further, the Examiner admits that Skoyles-Greenberg further fails to teach generalized 
and company-specific work products as well as an indicator of approximate maturity provided in 
a report. 

Aycock 

The Examiner admits that Skoyles-Greenberg further fails to provide any teaching of a 
maturity of a company being approximated in view of two maturity models, wherein the 
individual requirements of the at least two maturity models are related to the generalized work 
products. To make up for this substantial deficiency, the Examiner relies upon Aycock. 

Aycock describes a method for evaluating supplier capabilities to qualify a supplier as a 
vendor. A tier 1 analysis in step 10 of the method begins with establishing a master set of 
supplier quality process maturity requirements in step 12. These maturity requirements may be 
established from a known set of quality process standards, such as: ISO 9001 "Quality Systems— 
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Model for Quality Assurance and Design, Production, Installation and Servicing"; ISO 9000-1 
"Quality Management and Quality Assurance Standards: Part Ill-Guidelines for the Application 
of ISO 9001 to the Development, Supply and Maintenance of Software"; IEEE Std. 1074 
"Standard for Developing Life Cycle Processes"; DOD-STD-2167A, "Defense System Software 
Development"; DOD-STD-2168, "Defense System Software Quality Program"; Bellcore 
documents TR-NWT-0001252, "Quality System Generic Requirements for Hardware", Issue 1, 
December 1992 and TR-NWT-000179, "Quality System Generic Requirements for Software", 
Issue 2, June 1993. Aycock, column 5, lines 19-36. 
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The tier 1 analysis continues to step 14 in Figure 1, whereby quality maturity 
requirements are selected fi-om the set of requirements established in step 12 in accordance with 
project requirements. The system in step 14 selects only those quality maturity requirements 
fi"om the set of maturity requirements established in step 12 that are necessary for the objectives 
of the specific project. Aycock, column 5, lines 45-65. 

After the necessary quality maturity requirements have been selected in step 14, the 
process continues at step 16 to apply the requirements to the request for proposal/request for 
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quotation (RFP/RFQ), which includes requirements for technical specifications, price and 
availability, service and support and the selected quality maturity requirements from step 14. The 
completed RFP/RFQ in step 16 is disseminated to suppliers that desire to be qualified as vendors 
for the identified project. The completed RFP/RFQ is received from the supplier in step 18, and 
includes the suppher responses to the RFP/RFQ requirements in step 16. Aycock, column 6, 
lines 1-10. 

The supplier responses may be in written form, or may be electronically stored on a 
tangible medium, such as a floppy diskette, a non-volatile memory card, or other type of device. 
After the completed RFP/RFQ including the supplier responses is received fi^om the supplier in 
step 18, the supplier responses to the maturity questions are analyzed in step 20. As discussed 
above with respect to step 14, certain maturity requirements have different levels of relevance to 
the project objectives. Aycock, column 6, lines 1 1-18. 

Thus, each of the maturity questions are assigned a weight value corresponding to the 
relevance of the maturity questions to the project objective. A maturity question may be 
assigned a weight factor of 1-5, whereby a maturity question having a weighted value of 1 would 
refer to a maturity requirement having a modest degree of relevance to the project objective, 
whereas the weighting value of 5 refers to a maturity requirement having a critical relevance to 
the project objective. Aycock, column 6, lines 19-27. 

The maturity questions applied to the RFP/RFQ in step 16 are written in an objective 
format, such as "yes"or "no" type questions, or asking the supplier to select a response "A-E" that 
best represents the suppliers capabilities. The supplier responses are then scored based upon an 
objective evaluation of the responses. For example, for "yes"or "no" type of responses, a supplier 
response may receive a predetermined point value. Thus, if a supplier answers "no", or does not 
provide a response, the supplier would receive a score of "0" for that particular maturity 
question. If, however, the supplier responds with a "yes", then the supplier would be awarded a 
score of "1" for the score for that question. Aycock, column 6, lines 53-68. 

After scoring the supplier responses in step 22, a supplier maturity level is calculated in 
step 24. The supplier maturity level may be calculated in a variety of ways. For example, the 
supplier maturity level may be calculated by correlating the score of each supplier response with 
the weighting value of the corresponding maturity question. In such a case, a suppher maturity 
level value is calculated as a weighted summation of the supplier responses. In addition, the 
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supplier maturity level may be calculated on the basis of the mean value of the supplier 
responses and/or the standard deviation of the suppler responses. Aycock, column 7, lines 13-23. 

Upon calculating the supplier maturity level in step 24, it is then determined in step 26 
whether the supplier meets the minimum maturity level. Preferably, the minimum maturity level 
is set at either a level 2 maturity level for a repeatable process, or a level 3 maturity level for a 
standardized process. If the supplier does not meet the minimum maturity level in step 26, the 
supplier is automatically rejected in step 30. Aycock, colunm 7, lines 38-45. 

However, if it is determined in step 26 that the supplier meets the minimum maturity 
level, then an interim decision is made in step 32 whether to automatically approve the supplier. 
Aycock, column 7, lines 46-49. 

In view of the process described by Aycock, it is clear to one of ordinary skill in the art 
that Aycock does not provide any teaching providing individual requirements of the at least one 
maturity model on a display; receiving generalized work products through a user interface and 
storing the generalized work products in a first table; and with a computer processor, relating the 
individual requirements of the at least one maturity model stored in a second tabic to the 
generalized work products stored in the first table, as recited in amended independent Claim 1 . 

Instead, Aycock assesses only company-specific work products through a user interface 
and not any generalized work products. Based on this assessment of only company-specific 
work products, Aycock determines the maturity level of the company in order to determine 
whether to use the company as a supplier. 

Baudoin 

The Examiner admits that Skoyles-Greenberg fails to provide any teaching of at least one 
maturity model which includes multiple levels of maturity. To make up for this deficiency, the 
Examiner relies upon the Baudoin reference. 

The Baudoin reference describes a security maturity assessment (SMA). The SMA 
method is initiated by ensuring that an organization's management is aware and committed to 
improving the organization's information security practices and policies (Step 100). An 
assessment entity (e.g., individual/company conducting assessment) then assesses the 
organization's information security practices and policies (Step 102). Using the information 
gained in Step 102, the assessment entity develops a corrective action plan (Step 104). 
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The corrective action plan is subsequently executed (Step 106). If the organization 
desires continuous monitoring after the execution of the corrective action plan (Step 108), then 
the assessment entity may continuously monitor revised information security policies and 
practices of the organization (Step 110). Following the continuous monitoring, the method may 
return to Step 100 to ensure that the organization's management is still aware and committed, or 
potentially proceed directly to Step 102 if the organization's management continues to be aware 
and committed. If the organization desires not to have continuous monitoring after the execution 
of the corrective action plan (Step 108), then the method ends. Baudoin, page 2, paragraph 
[0018]. 

Baudoin explains that the assessment entity initiates the SMA by collecting documents 
detailing the organization's existing information security policies and practices. After review of 
the collected documents, additional information is typically obtained via interviews with 
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participants identified at the beginning of this stage. Using the information obtained from the 
collected documents and the interviews, a preliminary rating is generated. The preliminary rating 
details the maturity of individual sections and the overall maturity level of the organization's 
information security practices and policies. Baudoin, page 2, paragraph [0021]. 

Baudoin further explains that the preliminary rating is generated using a security 
assessment matrix (SAM). The SAM defines each level of maturity for each information security 
item. The SAM includes 61 rows corresponding to the groups of the BS7799/ISO 17799 standard 
information security items, and 5 columns defining the maturity level. The five maturity levels, 
arranged from least mature to most mature, are Initial (Level 1), Repeatable (Level 2), Defined 
(Level 3), Managed (Level 4), and Optimizing (Level 5). For each intersection of row and 
column, there is a paragraph that defines a specific "capability maturity" level. The paragraphs 
contained in a given row of the SAM represent successive capability maturity levels for the same 
information security item. Further, some rows of the SAM represent successive capability 
maturity levels associated with a single information security item, as described in one paragraph 
of the BS7799/ISO 17799 standard. Other rows of the SAM may represent successive capabiHty 
maturity levels of information security items that the BS7799/ISO 17799 standard describes in 
separate paragraphs or sections. Baudoin, pages 2-3, paragraph [0022]. 

Like Skoyles-Greenberg and Aycock, Baudoin does not provide any teaching of 
providing individual requirements of the at least one maturity model on a display; receiving 
generalized work products through a user interface and storing the generalized work products in 
a first table; and with a computer processor, relating the individual requirements of the at least 
one maturity model stored in a second table to the generalized work products stored in the first 
table, as recited in amended independent Claim 1 . 

Balz 

The Examiner admits that the combination of Skoyles-Greenberg and Baudoin fails to 
provide any teaching of an approximate maturity indicator as a percentage. To address this 
deficiency, the Examiner relies upon Balz. 

Balz illustrates a process vitality index (PVI) assessment scheme according to the prior 
art. A table 10, depicted in the left-hand side in FIG. 1, provides five categories 20 60 
designated as "approaches" in the right-hand column. Each of the categories 20 60 is assigned a 
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score 70 which is 0% for the first category 20 "no systematic approach evident" and 100% for 

the last category 60 "a sound systematic approach". The remaining three categories 30 50 in 
between the first 20 and the last category 60 are assigned percent ranges such as 10% to 30%. 
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A decision tree 80 depicted in the right-hand of FIG. 1 illustrates how the above mentioned five 
categories 20 60 are evaluated to obtain a final score 90. If all categories 20 60 are answered 
with "YES" then the final score 90 is 100%. If one or more category of these categories 20 60 is 
(are) answered with "NO" then the final score 90 will lie between 0% and 100%. Balz, column 
4, lines 1-19. 

While the Examiner relies on Balz to provide a teaching of maturity indicator as a 
percentage, Balz states that this table with percentages is prior art and that his technology 
illustrated in the remaining figures does not follow this table which uses percentages. Therefore, 
one of ordinary skill in the art would be encouraged by Balz to NOT use percentages. 

Furthermore, like Skoyles-Greenberg, Aycock, and Baudoin, Balz also does not provide 
any teaching of providing individual requirements of the at least one maturity model on a 
display; receiving generalized work products through a user interface and storing the generalized 
work products in a first table; and with a computer processor, relating the individual 
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requirements of the at least one maturity model stored in a second table to the generalized work 
products stored in the first table, as recited in amended independent Claim 1 . 

Summary for Claim 1 

Since the cited references in this Office Action fail to teach each and every element 
claimed in this application, especially those in independent Claim 1, the undersigned 
representative believes independent Claim 1 and all claims depending therefi"om to be allowable 
over the cited art. Accordingly, the undersigned representative requests consideration and an 
indication that Claim 1 is allowable over the prior art of record. 

Independent Claim 9 

It is respectfiiUy submitted that Skoyles-Greenberg, Aycock, Baudoin, and Balz, 
individually or in view of each other, fail to describe, teach, or suggest the combination of: (1) 
receiving data indicative of organization-specific work products into the maturity tracing system 
(2) through the user interface and (3) storing the organization-specific work products (4) in a first 
table; (5) with a computer processor, (6) associating at least some of the organization-specific 
work products (7) stored in the first table (8) with at least some pre-existing generalized work 
products (9) received with the maturity tracing system (10) through the user interface and (11) 
stored in a second table; (12) receiving a request (13) through the user interface (14) for tracing 
of the organization-specific work products (15) stored in the first table (16) to maturity 
requirements for the at least one maturity model (17) stored in a third table, (18) wherein the 
maturity tracing system includes at least one computer application (19) for relating the pre- 
existing generalized work products (20) stored in the second table (21) to the maturity 
requirements for the at least one maturity model (22) stored in the third table; (23) receiving a 
request for a report indicating the approximate maturity level of the organization in view of at 
least one maturity model (24) through the user interface; and (25) displaying the report on a 
display, as recited in amended independent Claim 9. 

Similar to Claim 1, Claim 9 lists receiving data indicative of organization-specific work 
products into the maturity tracing system through the user interface and storing the organization- 
specific work products in a first table; with a computer processor, and associating at least some 
of the organization-specific work products stored in the first table with at least some pre-existing 
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generalized work products received with the maturity tracing system through the user interface 
and stored in a second table. 

Since the cited references in this Office Action fail to teach each and every element 
claimed in this application, especially those in amended independent Claim 9, the undersigned 
representative believes independent Claim 9 and all claims depending therefi"om to be allowable 
over the cited art. Accordingly, the undersigned representative requests consideration and an 
indication that amended independent Claim 9 is allowable over the prior art of record. 

Independent Claim 15 

It is respectfully submitted that Skoyles-Greenberg, Aycock, Baudoin, and Balz, 
individually or in view of each other, fail to describe, teach, or suggest the combination of: (1) 
computer means for storing data representative of generalized work products (2) in a first table, 
(3) data representative of individual requirements for the at least one maturity model (4) in a 
second table, and (5) data representative of the company-specific work products (6) in a third 
table; (7) at least one relationship database for relating the data representative of generalized 
work products (8) stored in the first table (9) to the data representative of individual requirements 
for the at least one maturity model (10) stored in the second table; (11) a computer application 
for prompting (12) in a user interface the association of the data representative of the company- 
specific work products (13) stored in the third table (14) to the data representative of generalized 
work products (15) stored in the first table; (16) a computer application for tracing the data 
representative of the company-specific work products (17) stored in the third table (18) to the 
data representative of individual requirements for the at least one maturity model (19) stored in 
the second table; and (20) a computer application for providing and (21) displaying an indicator 
of the approximate maturity of the company in view of the at least one maturity model, as recited 
in amended independent Claim 15. 

Similar to Claim 1, Claim 15 has data representative of generalized work products in a 
first table, data representative of individual requirements for the at least one maturity model in a 
second table, and data representative of the company-specific work products in a third table; and 
at least one relationship database for relating the data representative of generalized work 
products stored in the first table to the data representative of individual requirements for the at 
least one maturity model stored in the second table. 
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Since the cited references in this Office Action fail to teach each and every element 
claimed in this application, especially those in amended independent Claim 15, the undersigned 
representative believes independent Claim 15 and all claims depending therefrom to be allowable 
over the cited art. Accordingly, the undersigned representative requests consideration and an 
indication that amended independent Claim 15 is allowable over the prior art of record. 

Dependent Claims 2-8. 10-14. and 16-18 

Since Claims 2-8, 10-14, and 16-18 are dependent on independent Claims 1, 9, and 15 
and since these three independent claims are believed to be allowable over the prior art of record, 
the Applicants believe that these dependent claims are also allowable over the prior art of record. 
Therefore, the undersigned representative requests consideration and an indication that these 
dependent claims are allowable over the prior art of record. 

CONCLUSION 

The undersigned believes that claims in this application arc allowable over the cited prior 
art and respectfully requests a notice of allowance to this effect. Should the Examiner determine 
that any further action is necessary to place this application into better form, the Examiner is 
encouraged to telephone the undersigned representative at the number listed below. In addition, 
if any additional fees are required in connection with the filing of this response, the 
Commissioner is hereby authorized to charge the same to Deposit Account No. XX-XXXX. 

RespectfiiUy submitted. 
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